When bridge is deleted before tap/vif device's delete, kernel may encounter an oops because of NULL reference to fake_rtable's dst.Set fake_rtable's dst to NULL before sending packets out can solve this problem.